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MAPPING A STACK IN A STACK MACHINE ENVIRONMENT 

ABSTRACT OF THE DISCLOSURE 

The stack mapper of the present invention seeks to determine the shape of the stack at a given 
program counter. This is accomplished by locating all start points possible for a given method, 
that is, at all of the entry points for the method and all of the exception entry points, and trying to 
find a path from the beginning of the method to the program counter in question. The mapper 
first tries to locate a linear path from the beginning of the method, and then iteratively processes 
the sequence of bytes at each branch until the destination program counter is reached. Once the 
path is found, a simulation is run of the stack through that path, which is used as the virtual stack 
for the purposes of the garbage collector. 
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MAPPING A STACK IN A STACK MACHINE ENVIRONMENT 

Field of the Invention 

This invention relates generally to the field of memory optimization, and provides, in particular, a 
method for mapping the dynamic memory stack in a programming language environment such as 
Java. 

5 

Background of the Invention 

Java programs (as well as those in other object-oriented or 00 languages) require the allocation of 
dynamic storage from the operating system at run-time. This run-time storage is allocated as two 
separate areas known as the "heap" and the "stack". The stack is an area of addressable or dynamic 
10 memory used during program execution for allocating current data objects and information. Thus, 
references to data objects and information associated with only one activation within the program 
are allocated to the stack for the life of the particular activation, Objects (such as classes) containing 
data that could be accessed over more than one activation must be heap allocated or statically stored 
for the duration of use during run-time. 

15 

Because modem operating systems and hardware platforms make available increasingly large stacks, 
modern applications have correspondingly grown in size and complexity to take advantage of this 
available memory. Most applications today use a great deal of dynamic memory. Features such as 
multitasking and multithreading increase the demands on memory. 00 programming languages use 
20 dynamic memory much more heavily than comparable serial programming languages like C, often 
for small, short-lived allocations. 

The effective management of dynamic memory, to locate useable free blocks and to deallocate 
blocks no longer needed in an executing program, has become an important programing 
25 consideration. A number of interpreted 00 programming languages such as Smalltalk, Java and 
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Lisp employ an implicit form of memory management, often referred to as garbage collection, to 
designate memory as "free" when it is no longer needed for its current allocation. 

Serious problems can arise if garbage collection of an allocated block occurs prematurely. For 
5 example, if a garbage collection occurs during processing, there would be no reference to the start 
of the allocated block and the collector would move the block to the free memory list. If the 
processor allocates memory, the block may end up being reallocated, destroying the current 
processing. This could result in a system failure. 

10 A block of memory is implicitly available to be deallocated or returned to the list of free memory 
whenever there are no references to it. In a runtime environment supporting implicit memory 
management, a garbage collector usually scans or "walks" the dynamic memory from time to time 
looking for unreferenced blocks and returning them. The garbage collector starts at locations known 
to contain references to allocated blocks. These locations are called "roots". The garbage collector 

15 examines the roots and when it finds a reference to an allocated block, it marks the block as 
referenced. If the block was unmarked, it recursively examines the block for references. When all 
the referenced blocks have been marked, a linear scan of all allocated memory is made and 
unreferenced blocks are swept into the free memory list. The memory may also be compacted by 
copying referenced blocks to lower memory locations that were occupied by unreferenced blocks 

20 and then updating references to point to the new locations for the allocated blocks. 

The assumption that the garbage collector makes when attempting to scavenge or collect garbage 
is that all stacks are part of the root set of the walk. Thus, the stacks have to be fully described and 
walkable, 

25 

In programming environments like Smalltalk, where there are no type declarations, this is not 
particularly a problem. Only two different types of items, stack frames and objects, can be added 
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to the stack. The garbage collector can easily distinguish between them and trace references relating 
to the objects. 

However, the Java programming language also permits base types (i.e., integers) to be added to the 
5 stack. This greatly complicates matters because a stack walker has to be more aware how to view 
each stack slot. Base types slots must not be viewed as pointers (references), and must not be 
followed during a walk. 

Further, the content of the stack may not be static, even during a single allocation. As a method 
1 0 runs, the stack is used as a temporary "scratch" space, and an integer might be pushed onto the stack 
or popped off it, or an object pushed or popped at any time. Therefore, it is important to know 
during the execution of a program that a particular memory location in the stack contains an integer 
or an object. 

1 5 The changing content of a stack slot during method execution can be illustrated with the following 
simple bytecode sequence of the form: 

ICONST 0 
POP 

20 NEW 
POP 
RETURN 

As this is run, an integer, zero (0), is pushed onto the top of the stack, then popped so that the stack 
25 is empty. Then an object (pointer) is pushed onto the top of the stack, and then popped so that the 
stack is again empty. Schematically, the stack sequence is: 
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0 

OBJECT 

5 

In this sequence, the constant 0 and the object share the same stack location as the program is 
running. Realistically, this sequence would never result in a garbage collection. However, in the 
naive case, if garbage collection did occur just after the integer was pushed onto the stack, the slot 
should be ignored, not walked, because it contains only an integer, whereas if a garbage collection 
10 occurred after the object had been pushed onto the stack, then the slot would have to be walked 
because it could contain the only reference to the object in the system. In addition, if the object on 
the stack had been moved to another location by compaction, then its pointer would have to be 
updated as well. 

1 5 Thus, the stack walker has to have a scheme in place to determine which elements to walk and which 
to skip on the stack. 

One solution proposed by Sun Microsystems, Inc in its U.S. Patent No. 5,668,999 for "System and 
Method for Pre-Verification of Stack Usage in Bytecode Program Loops", is to calculate the stack 
20 shapes for all bytecodes prior to program execution, and to store as a "snapshot", the state of a 
virtual stack paralleling typical stack operations required during the execution of a bytecode 
program. The virtual stack is used to verify that the stacks do not underflow or overflow. It 
includes multiple, pre-set entry points, and can be used as a stack map in operations such as implicit 
memory management. 

25 

However, the creation of a virtual stack of the whole program can be costly in terms of processing 
time and memory allocation, when all that may be required is a stack mapping up to a specific 
program counter (PC) in the stack, for a garbage collector to operate a limited number of times 

4 
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during program execution. 
Summary of the Invention 

It is therefore an object of the present invention to provide mapping for any PC location on the stack. 
5 Then, if a garbage collection occurs, the shape of the stack can be determined for that part of the 
stack frame. 

It is also an object of the present invention to provide a method for mapping the shape of a portion 
of the stack for use either statically, at method compilation, or dynamically, at runtime. 

10 

A further object of the invention is to provide memory optimizing stack mapping. 

The stack mapper of the present invention seeks to determine the shape of the stack at a given PC. 
This is accomplished by locating all start points possible for a given method, that is, at all of the 
1 5 entry points for the method and all of the exception entry points, and trying to find a path from the 
beginning of the method to the PC in question. Once the path is found, a simulation is run of the 
stack through that path, which is used as the virtual stack for the purposes of the garbage collector. 

Accordingly, the present invention provides a method for mapping a valid stack up to a destination 
20 program counter through mapping a path of control flow on the stack from any start point in a 
selected method to the destination program counter and simulating stack actions for executing 
bytecodes along said path. In order to map a path of control flow on the stack, bytecode sequences 
are processed linearly until the control flow is interrupted. As each bytecode sequence is processed, 
unprocessed targets from any branches in the sequence are recorded for future processing. The 
25 processing is repeatedly iteratively, starting from the beginning of the method and then from each 
branch target until the destination program counter has been processed. Preferably a virtual stack 
is generated from the simulation, which is encoded and stored on either the stack or the heap. 
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Brief Description of the Drawings 

Embodiments of the invention will now be described in detail in accordance with the accompanying 
drawings, in which: 

Figure 1 A is a flow diagram outlining the steps taken by the stack mapper according to the 
5 present invention to map the shape of the stack to a given program counter during two passes; 

Figure IB is a flow diagram, similar to Figure 1A, illustrating the processing of a bytecode 
sequence at one point in the method of Figure 1 A; 

Figure 2 is a schematic diagram of a sample segment of stack slots for illustrating the method 
of operation of the invention; 
10 Figure 3, consisting of Figures 3 A through 31, is a schematic illustration of the changes in 

three tables in memory used to track the processing of the individual program counters during the 
mapping of the sample segment of Figure 2, according to the preferred embodiment of the invention; 

Figure 4 is a schematic illustration of a compiled method stored on the heap which includes 
static storage of a stack map generated during compilation of the method; and 
15 Figure 5 is a schematic illustration of a stack constructed for a method which provides 

storage for a stack map generated dynamically at runtime. 

Detailed Description of the Preferred Embodiments 

"The Java Virtual Machine Specification" details the set of operations that a Java virtual machine 
20 must perform, and the associated stack actions. Not included in the Java specification are some more 
stringent requirements about code flow. These are specified in the bytecode verifier (discussed in 
detail in Sun's U.S. Patent No. 5,668,999, referenced above). Code sequences that allow for 
different stack shapes at a given PC are not allowed because they are not verifiable. Sequences that 
cause the stack to grow without bound are a good example. Thus, the following code is not legal: 

25 x: ICONST1 

GOTOx 

because it creates an infinite loop and a never-ending stack. 
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The present invention is described in the context of a Java programming environment. It can also 
apply to any environment that prohibits the use of illegal stack statements in a manner similar to that 
provided by the Java bytecode verifier. 

5 The shape of the stack is determined by the control flows, the path or paths, within the method for 
which the stack frame was or will be constructed. Therefore, in the method of the present invention, 
a path from any start point of the method to a selected PC is located, and then the stack actions for 
the bytecodes along the path are simulated. The implementation of this method in the preferred 
embodiment is illustrated in more detail in the flow diagrams of Figures 1 A and IB, and discussed 
10 below. 

Figure 2 is a sample of stack layout 200 for a method, to illustrate the preferred embodiment. (In 
the example, "JSR" refers to a jump to a subroutine, a branch with a return, and "IF EQ 0" is a 
coomparison of the top of the stack against zero.) A linear scanning of these PCs as they are laid 
1 5 out in memory, starting at the beginning of the method and walking forward to a selected destination, 
such as PC 7, is not appropriate. The linear scan would omit the jump at PC 2 to the subroutine at 
PC 6, resulting in a break in the stack model without knowledge of how to arrive at the selected PC. 

Returning to Figure 1 , the input to the method of the invention is the destination PC for the method 
20 and the storage area destination to which the resulting information on the stack shape will be written 
(block 1 00). When the mapping occurs at runtime, the definition of the storage destination will point 
to a location on the stack; when the mapping occurs at compile time, the pointer will be into an 
array for storage with the compiled method on the heap. The different uses of the invention for stack 
mapping at runtime and at compilation are discussed in greater detail below. 

25 

Memory for three tables, a seen list, a branch map table and a to be walked list, are allocated and the 
tables are initialised in memory (block 102). In the preferred embodiment, the memory requirement 
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for the tables is sized in the following manner. For the seen list, one bit is reserved for each PC. 
This is determined by looking at the size of the bytecode array and reserving one bit for each 
bytecode. Similarly, two longs are allocated for each bytecode or PC in both the to be walked list 
and the branch map table. The bit vector format provides a fast implementation. 

The three tables are illustrated schematically in Figure 3 for the code sequence given in Figure 2: 
Figure 3A shows the state of these tables at the beginning of the stack mapper's walk; Figures 3B 
through 31 show the varying states of these tables as the stack mapper walks this code sequence. 

The seen list is used in the first pass of the stack mapper to identify bytes which have already been 
walked, to avoid entering an infinite loop. At the beginning of the walk, no bytes in the given 
sequence are identified as having been seen. The to be walked list provides a list of all known entry 
points to the method. At the beginning of the stack mapper's walk, the to be walked list contains 
the entry point to the method at byte zero (0) and every exception handler address for the selected 
method. The branch map is initially empty. 

Once these data structures are initialised, the first element from the to be walked list is selected 
(block 104) and the sequence of bytecodes is processed (block 106) in a straight line according to 
the following criteria or states and as illustrated in the flow diagram of Figure 1 B. As each bytecode 
is selected for processing, it is added to the seen list (block 150). The actions taken in processing 
the bytecode are determined by the state that defines it: 

state 0: flow unaffected (block 1 52), advance to next bytecode, if any (blocks 1 54, 1 56) 

state 1 : branch conditional (block 1 58), if branch target has not yet been seen (block 1 60), 
then add it to the to be walked list (block 162), and in any event, advance to next 
bytecode, if any (blocks 154, 156) 
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state 2: branch unconditional (block 164), if the branch target has not yet been seen (block 

1 65), add it to the to be walked list (block 1 66) and end the straight walk (block 1 68) 

state 3: jump to subroutine (JSR) (block 170), if branch target has not yet been seen (block 
5 1 60), the add it to the to be walked list (block 1 62), and in any event, advance to the 

next bytecode, if any (blocks 154, 156) 

state 4: return (block 172) ends the straight walk (block 168) 

1 0 state 5 : table bytecode (block 1 74), if branch targets have not yet been seen (block 1 65), then 

add them to the to be walked list (block 1 66), and end the straight walk (block 1 68) 

state 6: wide bytecode (block 1 76), calculate size of bytecode to determine increment to next 

bytecode (block 178) and advance to next bytecode, if any (blocks 154, 156) 

15 

state 7: breakpoint bytecode (block 180), retrieve the actual bytecode and its state (block 
182), and then process the actual bytecode (starting at block 150) 

State 0 defines a byte that does not cause a branch or any control flow change. For example, in the 
20 sample sequence of Figure 2, A LOAD does not affect the flow and would be processed as state 0. 

A conditional branch (state 1) has two states; it can either fall through or go to destination. As the 
stack mapper processes a conditional branch, it assumes a fall through state, but adds the branch 
target to the to be walked list in order to process both sides of the branch. Figure 2 contains a 
25 conditional branch at bytes 4, 5. However, if a branch target has already been walked (according to 
the seen list), then the target is not added (block 156 in Figure IB). 

A JSR is a language construct used in languages like Java. It is similar to an unconditional branch, 
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except that it includes a return, similar to a function call. It is treated in the same way as a 
conditional branch by the stack mapper. Figure 2 contains a JSR to byte 6 at byte 2. 

Table bytecodes includes lookup tables and table switches (containing multiple comparisons and 
5 multiple branch targets). These are treated as an unconditional branch with multiple branches or 
targets; any targets not previously seen according to the seen list are added to the to be seen list. 

Temporary betch and store instructions are normally one or two bytes long. One byte is for the 
bytecode and one byte is for the parameter unless it is inferred by the bytecode. However, Java 
10 includes an escape sequence which sets the parameters for the following bytecode as larger than 
normal (wide bytecode). This affects the stack mapper only in how much the walk count is 
incremented for the next byte. It does not affect control. 

Breakpoints are used for debugging purposes. The breakpoint has overlaid the actual bytecode in 
1 5 the sequence, so is replaced again by the actual bytecode. 

Processing of the bytecodes in the sequence continues until terminated (eg., by an unconditional 
branch or a return), or when there are no more bytecodes in the sequence. Returning to Figure 1 A, 
if the selected PC was not seen during the walk because it is not found on the seen list (block 1 08), 
20 the next element on the to be walked list is selected (block 1 04) and the bytecode sequence from it 
processed (block 106) following the same steps in Figure IB until the selected PC has been walked 
(block 108 in Figure 1A). 

Thus, the processing of the bytecode sequence in Figure 2, given PC7 as the destination PC, would 
25 be performed as follows: 

Figure 3 A: At commencement, there would be only one element, PC 0 in the to be seen list 308. 
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5 



Figure 3B: PC 0 is marked as "seen" in the seen list 3 10 and removed from the to be seen list 
3 1 2. A LOAD does not affect the control flow; it is state 0. The stack mapper moves 
on to the next byte, PC 1 . 

Figure 3C: PC 1 is marked as "seen" in the seen list 314. The byte is again A LOAD, state 0, 
so the stack mapper moves on to the next PC. 



Figure 3D: PC 2 ("JSR") is treated in the first pass as a conditional branch. Once PC 2 is added 
10 to the seen list 3 1 6, its target PC 6 is added to the to be walked list 320 and the branch 

PC 6 (destination PC 304) / PC 2 (source branch 306) is added to the branch list 3 1 8. 

Figure 3E: The I LOAD of PC 3 is state 0, so the stack mapper moves to the next byte after 
adding PC 3 to the seen list 324. 

15 

Figure 3F: PC 4 is a conditional branch. After adding PC 4 to the seen list 326, the stack mapper 
attempts to add its target, PC 0, to the to be seen list 320, but cannot because PC 0 
is already on the seen list 326. 

20 Figure 3G: At the return of PC 5, code flow stops (state 4), ending the stack walk after PC 5 has 
been added to the seen list 328. 



At this point, the stack mapper determines whether it has seen the destination PC 7 (as per block 1 08 
in Figure 1A). Since it has not, the stack mapper begins processing a new line of bytecodes from 
25 the next entry on the to be walked list (block 104). According to the sample of Figure 2, the next 
PC on the to be walked list 320 in Figure 3G) is PC 6, the conditional branch from PC 2. Therefore, 
after marking PC 6 as seen (seen list 330, Figure 3H), the stack mapper processed the PC according 
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to state 0 and proceeds to the next bytecode, which is PC 7. PC 7 is marked as seen (seen list 332, 
Figure 31), and the walk ends again because it has encountered a fresh return (state 4). 

Once the selected PC has been walked (block 1 08), the path to the destination is calculated in reverse 
5 (block 1 1 0) by tracing from the destination PC 304 to the source PC 306 on the branch map list. In 
the example, the reverse flow is from PC 7 to PC 6 to PC 2. Because there is no comparable pairing 
of PC 2 with any other designated PC, it is assumed that PC 2 flows, in reverse, to PC 0. The 
reverse of this mapping provides the code flow from the beginning of the method to the destination 
PC 7, that is; 

10 

PC 0 -> PC 2 -> PC 6 -> PC 7. 

This is the end of the first pass of the stack mapper over the bytecodes. 

15 In the second pass, the stack mapper creates a simulation of the bytecodes (block 112) during which 
the stack mapper walks the path through the method determined from the first pass simulating what 
stack action(s) the virtual machine would perform for each object in this bytecode sequence. For 
many of the bytecode types (eg., A LOAD), the actions are table driven according to previously 
calculated stack action (pushes and pops) sequences. 

20 

Fifteen types of bytecodes are handled specially, mainly because instances of the same type may 
result in different stack action sequences (eg., different INVOKES may result in quite different work 
on the stack). 

25 An appropriate table, listing the tabel-driven actions and the escape sequences in provided in the 
Appendix hereto. A virtual stack showing the stack shape up to the selected PC is constructed in 
memory previously allocated (block 1 14). In the preferred embodiment, one CPU word is used for 
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each stack element. 

The virtual stack is then recorded in a compressed encoded format that is readable by the virtual 
machine (block 116). In the preferred embodiment, each slot is compressed to a single bit that 
essentially distinguishes (for the use of the garbage collector) between objects and non-objects (eg., 
5 integers). 

The compressed encoded stack map is stored statically in the compiled method or on the stack 
during dynamic mapping. In the case of static mapping, a stack map is generated and stored as the 
method is compiled on the heap. A typical compiled method shape for a Java method is illustrated 

1 0 schematically in Figure 4. The compiled method is made up of a number of fields, each four bytes 
in length, including the object header 400, bytecodes 402, start PC 404, class pointers 406, selector 
408, Java flags 4 1 0 and literals 414. According to the invention, the compiled method also includes 
a field for the stack map 412. The stack map field 412 includes an array that encodes the 
information about the temps or local variables in the method generated by the stack mapper in the 

1 5 manner described above, and a linear stack map list that a garbage collector can use to access the 
stack shape for a given destination PC in the array by calculating the offset and locating the 
mapping bits in memory. 

A stack map would normally be generated for static storage in the compiled method when the 
20 method includes an action that transfer control from that method, such as invokes, message sends, 
allocates and resolves. 

The stack map can also be generated dynamically, for example, when an asynchronous event 
coincides with a garbage collection. To accommodate the map, in the preferred embodiment of the 
25 invention, empty storage is left on the stack. 

Figure 5 illustrates a stack frame 500, having standard elements, such as an area for temps or 
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arguments pushed by the method 502, literals or the pointer the compiled method 504 (which also 
gives access to the stack map in the compiled method) and a back pointer 506 pointing to the 
previous stack frame. A small area of memory 508, possibly only four bytes, is left empty in the 
frame but tagged as needing dynamic mapping. An advantage of this is that if this stack frame 500 
5 is deep in the stack, once the dynamic mapping has taken place, the frame will be undisturbed and 
is available for future activations. 



The area on the stack for dynamic stack mapping 508 can be allocated whenever a special event 
occurs such as timer or asynchronous events and debugging, as well as for invokes, allocates and 
10 resolves discussed above. 



Modifications to the invention which would be obvious to the person skilled in the art are intended 
to be covered in the scope of the appended claims. 
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APPENDIX 

Simulation Action Keys: 



0. 


pop. 


u. 


push int 


U. 


push object 


d. 


dup 


1. 


dupxl 


2. 


dupx2 


3. 


dup2 


4. 


dup2xl 


5. 


dup2x2 


s. 


swap 


j- 


jsr 


m. 


multianewarray 


I. 


ldc 


i. 


invoke(static|virtual|interface|special) 


g- 


get(field/static) 


P- 


put(field/static) 



# 


Name 


Simulation Action 


Walk 


0 


nop 


it 


0x00 


1 


aconstnull 


TJ' 


0x00 


2 


iconstml 


'u* 


0x00 


3 


iconstO 


V 


0x00 


4 


iconstl 


•u' 


0x00 


5 


iconst2 




0x00 


6 


iconst3 


V 


0x00 


7 


iconst4 


V 


0x00 


8 


iconstS 


V 


0x00 


9 


IconstO 


w 


0x00 


10 


Iconstl 


'uu' 


0x00 


11 


fconstO 


'u' 


0x00 


12 


fconstl 


V 


0x00 


13 


fconst2 


'u' 


0x00 


14 


dconstO 


'uu' 


0x00 


15 


dconstl 


'uu' 


0x00 


16 


bipush 


'u 1 


0x00 



Action 
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17 


sipush 


'u' 


0x00 


18 


Idc 


T 


0x00 


19 


ldcw 


•r 


0x00 


20 


ldc2w 


W 


0x00 


21 


iload 


V 


0x00 


22 


lload 


W 


0x00 


23 


fload 


V 


0x00 


24 


dload 


W 


0x00 


25 


aload 


'U* 


0x00 


26 


iloadO 


'u' 


0x00 


27 


iload 1 




0x00 


28 


iload2 


'u* 


0x00 


29 


iload3 


'u' 


0x00 


30 


IloadO 


'uu' 


0x00 


31 


lloadl 


'uu' 


0x00 


32 


Uoad2 


•uu* 


0x00 


33 


lload3 


'uu' 


0x00 


34 


floadO 


'u' 


0x00 


35 


floadl 


V 


0x00 


36 


fload2 




0x00 


37 


fload3 


'u' 


0x00 


38 


dloadO 


*uu' 


0x00 


39 


dloadl 


'uu' 


0x00 


40 
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The embodiments of the invention in which an exclusive property or privilege is claimed are 
defined as follows: 



1 1 . A method for mapping a valid stack up to a destination program counter, comprising: 

2 mapping a path of control flow on the stack from any start point in a selected method to 

3 the destination program counter; and 

4 simulating stack actions for executing bytecodes along said path. 

1 2. A method for mapping a Java bytecode stack up to a destination program counter 

2 comprising: 

3 mapping a path of control flow on the stack from any start point in a selected method to 

4 the destination program counter; and 

5 simulating stack actions for executing bytecodes along said path. 

1 3 . The method of claim 1 or 2 wherein the step of mapping a path of control flow on the 

2 stack comprises: 

3 processing a first linear bytecode sequence until the control flow is interrupted; and 

4 recording unprocessed targets from any branches in the first linear bytecode sequence for 

5 future processing. 

1 4. The method of claim 3 wherein the step of mapping a path of control flow on the stack 

2 further comprises: 

3 processing an additional bytecode linear sequence until the control flow is interrupted; 

4 and 

5 recording unprocessed targets from any branches in the additional linear bytecode 

6 sequence for future processing, where the destination program counter was not reached during an 

7 earlier processing of a linear bytecode sequence. 
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1 5. The method of claim 3 or 4 wherein the step of processing any linear bytecode sequence 

2 comprises: 

3 determining if a bytecode in said any linear bytecode sequence is a breakpoint with a 

4 pointer to bytecode data; and 

5 replacing the breakpoint with the bytecode data. 

1 6. The method of claim 1 or 2 wherein the step of simulating stack actions executing the 

2 bytecodes along the path further comprises generating a virtual stack. 

1 7. The method of claim 6, further comprising: 

2 encoding the virtual stack as a bitstring and storing the bitstring at a selected destination 

3 for use in memory management operations. 

1 8. The method of claim 7, wherein the step of storing the bitstring comprises storing the 

2 bitstring to the selected method as compiled on a heap. 

1 9. The method of claim 7, wherein the step of storing the bitstring comprises storing the 

2 bitstring to a pre-allocated area on the stack, 

1 1 0. The method of claim 1 or 2 wherein the step of simulating stack actions executing the 

2 bytecodes along the path further comprises: 

3 inserting pre-determined stack actions for bytecodes maintaining the control flow in the 

4 selected method; and 

5 calculating stack actions for bytecodes transferring the control flow from the selected 

6 method. 
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1 11. A computer-readable memory for storing the instructions for use in the execution in a 

2 computer of any one of the methods of claims 1 to 1 0, 

1 12. A program storage device readable by a machine, tangibly embodying a program of 

2 instructions executable by the machine to perform method steps for mapping a valid stack up to a 

3 destination program counter, said method steps comprising: 

4 mapping a path of control flow on the stack from any start point in a selected method to 

5 the destination program counter; and 

6 simulating stack actions for executing bytecodes along said path, 

7 wherein the step of mapping a path of control flow on the stack comprises: 

8 processing a first linear bytecode sequence until the control flow is interrupted; and 

9 recording unprocessed targets from any branches in the first linear bytecode sequence for 

1 0 future processing, and 

1 1 where the destination program counter was not reached during an earlier processing of a 

12 linear bytecode sequence, 

1 3 processing an additional bytecode linear sequence until the control flow is interrupted; 

14 and 

1 5 recording unprocessed targets from any branches in the additional linear bytecode 

1 6 sequence for future processing. 
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